Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1-OTjV6_onWGGx4n-YOqvZbWOREg.roa
File: 1-OTjV6_onWGGx4n-YOqvZbWOREg.roa (raw, json)
Hash identifier: k4BybeQbRxfFDyndBNcfkNTlvAD6Tc83bi4IhBeAZdM=
Subject key identifier: F8:E4:E3:57:AF:E8:9D:61:86:C7:89:FE:60:EA:AF:65:B5:8E:44:48
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 03BA6589
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1-OTjV6_onWGGx4n-YOqvZbWOREg.roa
Signing time: Sat 01 Jan 2022 03:01:25 +0000
ROA not before: Sat 01 Jan 2022 03:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42088
IP address blocks: 185.212.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62547337 (0x3ba6589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 03:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8e4e357afe89d6186c789fe60eaaf65b58e4448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:64:0e:b0:ec:bf:53:05:61:c5:97:7d:d0:
ab:66:ae:06:e6:e6:a9:67:82:16:26:eb:cb:4d:0b:
f0:06:c3:66:d4:0a:5c:ca:cc:89:99:1b:44:36:2b:
10:d3:87:b8:0c:78:b0:87:f7:73:b3:ca:64:f2:4c:
51:e6:3b:0d:f5:51:49:eb:3e:e9:52:0c:79:1a:a0:
5b:a4:80:87:5d:0e:9b:34:ca:56:ca:5b:ab:ae:61:
0b:4a:ba:7b:ee:0f:a0:58:c0:8e:bf:f9:4f:82:5a:
cd:ba:0d:d6:8c:e0:18:d8:3a:97:f0:12:9a:a4:1b:
ff:7d:41:ed:d7:53:d7:f2:6a:f7:bd:51:8d:b2:a9:
07:a5:ec:ec:9b:3b:25:b5:9b:c6:3e:45:b9:48:ae:
b7:c0:86:58:b6:72:43:dd:96:d2:29:23:4a:6d:a9:
aa:27:f1:fa:49:66:c5:9f:64:ed:2b:6b:51:5c:b8:
c0:a9:2c:4c:49:ca:39:b3:37:c4:e1:f6:cc:df:9b:
a8:c6:8d:8f:a7:34:db:d4:ca:c7:aa:66:1f:fa:e5:
94:d2:92:a4:78:fc:b8:b3:04:1e:01:09:86:ab:c1:
55:30:32:2a:3d:29:ef:80:2e:25:8d:8d:f4:11:28:
af:d9:61:8c:fa:d4:01:8c:c3:0d:22:78:4f:2a:ec:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E4:E3:57:AF:E8:9D:61:86:C7:89:FE:60:EA:AF:65:B5:8E:44:48
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1-OTjV6_onWGGx4n-YOqvZbWOREg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.249.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:56:19:33:97:b9:22:65:10:55:72:eb:91:86:2d:42:be:cd:
ae:bd:ba:89:84:11:7a:1b:7c:06:ba:1b:79:a1:99:58:42:e3:
fb:ac:8f:61:74:6f:c7:e0:3d:18:a1:e9:be:96:b7:c2:46:8b:
79:4d:5c:a4:04:0f:d9:e6:34:b1:df:69:c1:c0:1c:25:71:d7:
ad:af:60:56:a4:9a:d6:78:af:0d:5b:c4:4e:6f:83:b4:c6:5c:
9b:61:09:a3:d9:97:06:ab:40:89:18:b6:23:24:f7:4f:d3:ee:
c0:6a:69:6b:ce:ae:89:76:39:b0:b6:f2:d5:d8:9b:6d:ef:f3:
0e:54:3e:a2:64:e9:b1:64:0c:d2:33:f4:ec:65:48:d6:c9:2e:
3d:1a:f0:a1:12:68:70:21:ca:5b:8a:cc:f8:31:4c:f6:82:22:
48:f5:f8:3c:d9:f6:e3:6b:84:78:2e:2c:3d:59:3f:40:eb:39:
5f:3d:d6:4d:8c:85:d2:1b:3c:f4:41:73:5a:c7:8f:d0:c4:1f:
6a:8b:26:d3:1d:df:71:88:f2:1d:fb:0e:b0:35:92:e8:df:3d:
d3:42:71:f2:b6:45:a5:06:85:76:1c:aa:b2:65:bc:c8:74:81:
05:c6:4c:6c:6e:80:93:ce:f1:67:5a:f3:ff:de:ca:a1:82:0b:
2f:e1:5a:22
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEA7pliTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2RmZWVhOWM3ZGUyNDZlNmQ3ZDFhNTA3NDA2Mjg1YjIyNmY5Mjg2MB4XDTIyMDEw
MTAzMDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhlNGUzNTdhZmU4
OWQ2MTg2Yzc4OWZlNjBlYWFmNjViNThlNDQ0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM46ZA6w7L9TBWHFl33Qq2auBubmqWeCFibry00L8AbDZtQK
XMrMiZkbRDYrENOHuAx4sIf3c7PKZPJMUeY7DfVRSes+6VIMeRqgW6SAh10OmzTK
Vspbq65hC0q6e+4PoFjAjr/5T4JazboN1ozgGNg6l/ASmqQb/31B7ddT1/Jq971R
jbKpB6Xs7Js7JbWbxj5FuUiut8CGWLZyQ92W0ikjSm2pqifx+klmxZ9k7StrUVy4
wKksTEnKObM3xOH2zN+bqMaNj6c029TKx6pmH/rllNKSpHj8uLMEHgEJhqvBVTAy
Kj0p74AuJY2N9BEor9lhjPrUAYzDDSJ4Tyrs7DkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT45ONXr+idYYbHif5g6q9ltY5ESDAfBgNVHSMEGDAWgBRz3+6px94kbm19
GlB0BihbIm+ShjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M5X3VxY2ZlSkc1dGZScFFkQVlvV3lKdmtvWS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvOWMwYTdlLTk5NjMtNGMwZC05NGFjLTQ0NmQwYTdlOTQwNC8x
LzEtT1RqVjZfb25XR0d4NG4tWU9xdlpiV09SRWcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Qx
LzljMGE3ZS05OTYzLTRjMGQtOTRhYy00NDZkMGE3ZTk0MDQvMS9jOV91cWNmZUpH
NXRmUnBRZEFZb1d5SnZrb1kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC51PkwDQYJKoZIhvcNAQELBQAD
ggEBAC1WGTOXuSJlEFVy65GGLUK+za69uomEEXobfAa6G3mhmVhC4/usj2F0b8fg
PRih6b6Wt8JGi3lNXKQED9nmNLHfacHAHCVx162vYFakmtZ4rw1bxE5vg7TGXJth
CaPZlwarQIkYtiMk90/T7sBqaWvOrol2ObC28tXYm23v8w5UPqJk6bFkDNIz9Oxl
SNbJLj0a8KESaHAhyluKzPgxTPaCIkj1+DzZ9uNrhHguLD1ZP0DrOV891k2MhdIb
PPRBc1rHj9DEH2qLJtMd33GI8h37DrA1kujfPdNCcfK2RaUGhXYcqrJlvMh0gQXG
TGxugJPO8Wda8//eyqGCCy/hWiI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net